CVE-2026-6482 | Rapid7 Insight Agent 4.1.0.2 Agent Service openssl.cnf inclusion of functionality from untrusted control sphere

VDB-358026 · CVE-2026-6482 · GCVE-0-2026-6482 RAPID7 INSIGHT AGENT 4.1.0.2 AGENT SERVICE OPENSSL.CNF INCLUSION OF FUNCTIONALITY FROM UNTRUSTED CONTROL SPHERE HISTORYDIFFRELATEJSONXMLCTI CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.1 $0-$5k 2.91+ Summaryinfo A vulnerability was found in Rapid7 Insight Agent 4.1.0.2 and classified as problematic. This impacts an unknown function of the file openssl.cnf of the component Agent Service. The manipulation results in inclusion of functionality from untrusted control sphere. This vulnerability is identified as CVE-2026-6482. The attack is only possible with local access. There is not any exploit available. It is suggested to upgrade the affected component. Detailsinfo A vulnerability was found in Rapid7 Insight Agent 4.1.0.2. It has been classified as problematic. Affected is an unknown code of the file openssl.cnf of the component Agent Service. The manipulation with an unknown input leads to a inclusion of functionality from untrusted control sphere vulnerability. CWE is classifying the issue as CWE-829. The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes: The Rapid7 Insight Agent (versions > 4.1.0.2) is vulnerable to a local privilege escalation attack that allows users to gain SYSTEM level control of a Windows host. Upon startup the agent service attempts to load an OpenSSL configuration file from a non-existent directory that is writable by standard users. By planting a crafted openssl.cnf file an attacker can trick the high-privilege service into executing arbitrary commands. This effectively permits an unprivileged user to bypass security controls and achieve a full host compromise under the agent’s SYSTEM level access. The weakness was released with Dell Security Assurance Team. The advisory is available at docs.rapid7.com. This vulnerability is traded as CVE-2026-6482 since 04/17/2026. The exploitability is told to be easy. Local access is required to approach this attack. Technical details are known, but there is no available exploit. Upgrading to version 4.1.0.2 eliminates this vulnerability. Productinfo Vendor Rapid7 Name Insight Agent Version 4.1.0.2 License commercial CPE 2.3info 🔒 CPE 2.2info 🔒 CVSSv4info VulDB Vector: 🔒 VulDB Reliability: 🔍 CNA CVSS-B Score: 🔒 CNA CVSS-BT Score: 🔒 CNA Vector: 🔒 CVSSv3info VulDB Meta Base Score: 5.3 VulDB Meta Temp Score: 5.1 VulDB Base Score: 5.3 VulDB Temp Score: 5.1 VulDB Vector: 🔒 VulDB Reliability: 🔍 CVSSv2info Vector Complexity Authentication Confidentiality Integrity Availability Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock VulDB Base Score: 🔒 VulDB Temp Score: 🔒 VulDB Reliability: 🔍 Exploitinginfo Class: Inclusion of functionality from untrusted control sphere CWE: CWE-829 CAPEC: 🔒 ATT&CK: 🔒 Physical: Partially Local: Yes Remote: No Availability: 🔒 Status: Not defined Price Prediction: 🔍 Current Price Estimation: 🔒 0-Day Unlock Unlock Unlock Unlock Today Unlock Unlock Unlock Unlock Threat Intelligenceinfo Interest: 🔍 Active Actors: 🔍 Active APT Groups: 🔍 Countermeasuresinfo Recommended: Upgrade Status: 🔍 0-Day Time: 🔒 Upgrade: Insight Agent 4.1.0.2 Timelineinfo 04/17/2026 Advisory disclosed 04/17/2026 +0 days CVE reserved 04/17/2026 +0 days VulDB entry created 04/17/2026 +0 days VulDB entry last update Sourcesinfo Advisory: docs.rapid7.com Organization: Dell Security Assurance Team Status: Confirmed CVE: CVE-2026-6482 (🔒) GCVE (CVE): GCVE-0-2026-6482 GCVE (VulDB): GCVE-100-358026 Entryinfo Created: 04/17/2026 08:37 Changes: 04/17/2026 08:37 (68) Complete: 🔍 Cache ID: 99:AD7:101 Discussion No comments yet. Languages: en. Please log in to comment. ◂ PreviousOverviewNext ▸